Privacy Policy

Effective date: March 29, 2026

Splitflash ("we", "our", or "the app") is an expense splitting app for iOS. We respect your privacy and are committed to protecting your personal data. This policy explains what information we collect, how we use it, and your rights.

Information We Collect

We only collect information necessary for the app to function:

Account information: When you sign in with Apple or Google, we receive your name and email address (or a relay email if you use Hide My Email with Apple). We use this solely to create and manage your account.
Expense data: Expenses, amounts, categories, descriptions, and dates you enter into the app.
Group data: Groups you create or join, including group names and member lists.
Photos: If you choose to attach a receipt photo to an expense, the image is uploaded and stored. Camera and photo library access is only used when you explicitly choose to add a photo.
Push notification tokens: If you opt in to notifications, we store your device token to send you relevant updates about expenses and settlements.

How We Use Your Information

All data collected is used exclusively to provide app functionality:

Authenticate your identity and maintain your account
Track and split expenses between you and your groups
Send push notifications about expense activity (if enabled)
Display your name to other group members

We do not use your data for advertising, analytics profiling, or any purpose unrelated to the app's core functionality.

Third-Party Services

We use the following third-party services:

Supabase: Secure cloud database and authentication. Your data is stored on Supabase's infrastructure. See Supabase's Privacy Policy.
RevenueCat: Manages in-app subscriptions. RevenueCat processes purchase data to manage your subscription status. See RevenueCat's Privacy Policy.
Apple Sign In / Google Sign In: Authentication providers. We receive only the information you authorize during sign-in.

Data Storage and Security

Your data is stored securely on Supabase's cloud infrastructure with row-level security policies ensuring you can only access data you're authorized to see. Authentication tokens are stored securely in your device's Keychain.

Data Retention

We retain your data for as long as your account is active. If you delete your account, your personal data will be removed from our systems.

Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Opt out of push notifications at any time via device settings

Children's Privacy

Splitflash is not intended for children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated effective date.

Contact Us

If you have questions about this privacy policy or your data, please contact us here.